![]() |
| |||||||
|
![]() |
| | Thread Tools |
|
#1
| |||
| |||
| mio fratello disinnestato a collegato al computer portatile. dopo, quando è collegato al pc originale ..... mio desktop, la velocità è davvero iniziando a succhiare ....... i dont know. il download che in genere è accaduto a aroun 14 kb ora succede a max.4kb. come, per esempio, facebook bene prima che si apre, ora kinda viene appeso per un lungo tempo in qualcosa di apertura. Io sono il mio distacco hijack log solo in caso di necessità. Please help. heres mio test di velocità sono i 128 di velocità ........ dont sapere se nella sua mega o chilo ....... ma credo che il suo più probabilmente quest'ultimo. http://www.speedtest.net/result/381473298.png Logfile di Trend Micro HijackThis v2.0.2 Scan salvato a 2:58:15 AM, il 12/31/2008 Piattaforma: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0013) Boot mode: Normal Processi in esecuzione: D: \ WINDOWS \ System32 \ smss.exe D: \ WINDOWS \ system32 \ Csrss.exe D: \ WINDOWS \ system32 \ winlogon.exe D: \ WINDOWS \ system32 \ services.exe D: \ WINDOWS \ system32 \ lsass.exe D: \ WINDOWS \ system32 \ svchost.exe D: \ WINDOWS \ system32 \ svchost.exe D: \ WINDOWS \ System32 \ svchost.exe D: \ WINDOWS \ system32 \ svchost.exe D: \ WINDOWS \ system32 \ svchost.exe D: \ WINDOWS \ system32 \ spoolsv.exe D: \ Program Files \ Common Files \ Microsoft Shared \ VS7DEBUG \ Mdm.exe D: \ WINDOWS \ system32 \ slserv.exe D: \ WINDOWS \ system32 \ wdfmgr.exe D: \ WINDOWS \ system32 \ wscntfy.exe D: \ WINDOWS \ system32 \ taskmgr.exe D: \ Program Files \ Ares \ Ares.exe D: \ WINDOWS \ explorer.exe E: \ TUTTE LE SOFTWARES \ HiJackThis.exe D: \ WINDOWS \ system32 \ wbem \ wmiprvse.exe R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = circa: bianco R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ SearchURL, (Default) = http://us.rd.yahoo.com/customize/yco.../www.yahoo.com F2 - REG: system.ini: Shell = explorer.exe O2 - BHO: DAPHelper Class - (0000CC75-ACF3-4cac-A0A9-DD3868E06852) - D: \ Program Files \ DAP \ DAPBHO.dll O2 - BHO: IDM Helper - (0055C089-8582-441b-A0BF-17B458C2A3A8) - D: \ Program Files \ Internet Download Manager \ IDMIECC.dll O2 - BHO: AskBar BHO - (201f27d4-3704-41d6-89c1-aa35e39143ed) - D: \ Program Files \ AskBarDis \ bar \ bin \ askBar.dll O2 - BHO: Skype add-on (mastermind) - (22BF413B-C6D2-4d91-82A9-A0F997BA588C) - D: \ Program Files \ Skype \ Toolbars \ Internet Explorer \ SkypeIEPlugin.dll O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - D: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file) O2 - BHO: Google Toolbar Helper - (AA58ED58-01DD-4d91-8333-CF10577473F7) - d: \ Programmi \ Google \ googletoolbar2.dll O3 - Toolbar: & Google - (2318C2B1-4965-11D4-9B18-009027A5CD4F) - d: \ Programmi \ Google \ googletoolbar2.dll O3 - Toolbar: (no name) - (DE9C389F-3316-41A7-809B-AA305ED9D922) - (no file) O3 - Toolbar: Ask Toolbar - (3041d03e-fd4b-44e0-b742-2d9b88305f98) - D: \ Program Files \ AskBarDis \ bar \ bin \ askBar.dll O4 - HKLM \ .. \ Run: [QuickTime Task] "D: \ Program Files \ QuickTime \ qttask.exe"-atboottime O4 - HKLM \ .. \ Run: [googletalk] D: \ Program Files \ Google \ Google Talk \ googletalk.exe / autostart O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "D: \ Program Files \ Java \ jre1.6.0_07 \ bin \ jusched.exe" O4 - HKCU \ .. \ Run: [ctfmon.exe] D: \ WINDOWS \ system32 \ ctfmon.exe O4 - HKCU \ .. \ Run: [BitTorrent DNA] "D: \ Program Files \ DNA \ btdna.exe" O8 - Extra contesto voce di menu: & Scarica con & DAP - D: \ PROGRA ~ 1 \ DAP \ dapextie.htm O8 - Extra contesto voce di menu: Scaricare e tutte con DAP - D: \ PROGRA ~ 1 \ DAP \ dapextie2.htm O8 - Extra contesto voce di menu: Scarica tutti i link con IDM - D: \ Program Files \ Internet Download Manager \ IEGetAll.htm O8 - Extra contesto voce di menu: Scaricare i contenuti video FLV con IDM - D: \ Program Files \ Internet Download Manager \ IEGetVL.htm O8 - Extra contesto voce di menu: Scaricare con IDM - D: \ Program Files \ Internet Download Manager \ IEExt.htm O8 - Extra contesto voce di menu: E & sporta in Microsoft Excel - res: / / D: \ PROGRA ~ 1 \ micros ~ 2 \ Office11 \ EXCEL.EXE/3000 O9 - Extra pulsante: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - D: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - D: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll O9 - Extra pulsante: Skype - (77BF5300-1474-4EC7-9980-D32B190E9B07) - D: \ Program Files \ Skype \ Toolbars \ Internet Explorer \ SkypeIEPlugin.dll O9 - Extra pulsante: (no name) - (85d1f590-48F4-11d9-9669-0800200c9a66) - D: \ WINDOWS \ bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - (85d1f590-48F4-11d9-9669-0800200c9a66) - D: \ WINDOWS \ bdoscandel.exe O9 - Extra pulsante: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - D: \ PROGRA ~ 1 \ micros ~ 2 \ Office11 \ REFIEBAR.DLL Ø16 - DPF: (17492023-C23A-453E-A040-C7C580BBF700) (Windows Genuine Advantage Validation Tool) -- http://go.microsoft.com/fwlink/?linkid=39204 Ø16 - DPF: (56762DEC-6B0D-4AB4-A8AD-989993B5D08B) (OnlineScanner Control) -- http://www.eset.eu/buxus/docs/OnlineScanner.cab Ø16 - DPF: (5D86DDB5-BDF9-441b-9E9E-D4730F4EE499) (BDSCANONLINE Control) -- http://download.bitdefender.com/reso...an8/oscan8.cab Ø16 - DPF: (6E32070A-766D-4EE6-879c-DC1FA91D2FC3) (MUWebControl Class) -- http://www.update.microsoft.com/micr...?1222679603245 Ø18 - Protocol: skype4com - (FFC8B962-9B40-4DFF-9458-1830C7DD7F5D) - D: \ PROGRA ~ 1 \ COMUNE ~ 1 \ Skype \ SKYPE4 ~ 1.DLL Ø20 - Winlogon Notify:! SASWinLogon - D: \ Program Files \ SUPERAntiSpyware \ SASWINLO.dll O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - D: \ Program Files \ Ares \ chatServer.exe O23 - Service: Distributed - Ignoto proprietario - D: \ Program Files \ Common Files \ Microsoft Shared \ Msinfo \ ServerNet.exe (file mancanti) O23 - Service: Google Updater Service (gusvc) - Google - D: \ Program Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe O23 - Service: PC Tools AntiVirus Engine (PCTAVSvc) - PC Tools Research Pty Ltd - D: \ Program Files \ PC Tools AntiVirus \ PCTAVSvc.exe O23 - Service: ServiceLayer - Nokia. - D: \ Program Files \ PC Connectivity Solution \ ServiceLayer.exe O23 - Service: SmartLinkService (SLService) - Smart Link - D: \ WINDOWS \ SYSTEM32 \ slserv.exe -- Fine del file - 6000 bytes |
|
#2
| |||
| |||
| Scaricare Malwarebytes' Anti-Malware (MBAM)
Ulteriori Note: Se MBAM incontra un file che è difficile da rimuovere, verrà presentato con 1 di 2 istruzioni, fare clic su OK per lasciare che sia MBAM e procedere con il processo di disinfezione, se richiesto di riavviare il computer, si prega di farlo immediatamente. ---------- Scaricare casuale il sistema di strumento di informazione (RSIT) dal casuale / random da e salvarlo sul desktop.
|
|
#3
| |||
| |||
| Logfile casuale del sistema di strumento di informazione 1,05 (scritto da casuale / random) Gestito da Burhan a 2009-01-01 23:01:39 Microsoft Windows XP Professional Service Pack 2 Sistema di unità D: è da 1 GB (16%) libera di 10 GB Totale RAM: 126 MB (17% gratuito) Logfile di Trend Micro HijackThis v2.0.2 Scan salvato a 11:01:43 PM, il 1/1/2009 Piattaforma: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0013) Boot mode: Normal Processi in esecuzione: D: \ WINDOWS \ System32 \ smss.exe D: \ WINDOWS \ system32 \ Csrss.exe D: \ WINDOWS \ system32 \ winlogon.exe D: \ WINDOWS \ system32 \ services.exe D: \ WINDOWS \ system32 \ lsass.exe D: \ WINDOWS \ system32 \ svchost.exe D: \ WINDOWS \ system32 \ svchost.exe D: \ WINDOWS \ System32 \ svchost.exe D: \ WINDOWS \ system32 \ svchost.exe D: \ WINDOWS \ system32 \ svchost.exe D: \ WINDOWS \ system32 \ spoolsv.exe D: \ Program Files \ Common Files \ Microsoft Shared \ VS7DEBUG \ Mdm.exe D: \ WINDOWS \ system32 \ ctfmon.exe D: \ WINDOWS \ system32 \ wdfmgr.exe D: \ WINDOWS \ System32 \ alg.exe D: \ WINDOWS \ system32 \ wscntfy.exe D: \ WINDOWS \ system32 \ taskmgr.exe D: \ WINDOWS \ system32 \ wbem \ wmiprvse.exe D: \ WINDOWS \ explorer.exe D: \ Documents and Settings \ Burhan \ Desktop \ RSIT.exe E: \ TUTTE LE SOFTWARES \ Burhan.exe R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = circa: bianco R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ SearchURL, (Default) = http://us.rd.yahoo.com/customize/yco.../www.yahoo.com F2 - REG: system.ini: Shell = explorer.exe O2 - BHO: DAPHelper Class - (0000CC75-ACF3-4cac-A0A9-DD3868E06852) - D: \ Program Files \ DAP \ DAPBHO.dll O2 - BHO: Skype add-on (mastermind) - (22BF413B-C6D2-4d91-82A9-A0F997BA588C) - D: \ Program Files \ Skype \ Toolbars \ Internet Explorer \ SkypeIEPlugin.dll O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - D: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file) O3 - Toolbar: (no name) - (DE9C389F-3316-41A7-809B-AA305ED9D922) - (no file) O4 - HKLM \ .. \ Run: [QuickTime Task] "D: \ Program Files \ QuickTime \ qttask.exe"-atboottime O4 - HKLM \ .. \ Run: [googletalk] D: \ Program Files \ Google \ Google Talk \ googletalk.exe / autostart O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "D: \ Program Files \ Java \ jre1.6.0_07 \ bin \ jusched.exe" O4 - HKCU \ .. \ Run: [ctfmon.exe] D: \ WINDOWS \ system32 \ ctfmon.exe O4 - HKCU \ .. \ Run: [BitTorrent DNA] "D: \ Program Files \ DNA \ btdna.exe" O8 - Extra contesto voce di menu: & Scarica con & DAP - D: \ PROGRA ~ 1 \ DAP \ dapextie.htm O8 - Extra contesto voce di menu: Scaricare e tutte con DAP - D: \ PROGRA ~ 1 \ DAP \ dapextie2.htm O8 - Extra contesto voce di menu: E & sporta in Microsoft Excel - res: / / D: \ PROGRA ~ 1 \ micros ~ 2 \ Office11 \ EXCEL.EXE/3000 O9 - Extra pulsante: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - D: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - D: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll O9 - Extra pulsante: Skype - (77BF5300-1474-4EC7-9980-D32B190E9B07) - D: \ Program Files \ Skype \ Toolbars \ Internet Explorer \ SkypeIEPlugin.dll O9 - Extra pulsante: (no name) - (85d1f590-48F4-11d9-9669-0800200c9a66) - D: \ WINDOWS \ bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - (85d1f590-48F4-11d9-9669-0800200c9a66) - D: \ WINDOWS \ bdoscandel.exe O9 - Extra pulsante: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - D: \ PROGRA ~ 1 \ micros ~ 2 \ Office11 \ REFIEBAR.DLL Ø16 - DPF: (17492023-C23A-453E-A040-C7C580BBF700) (Windows Genuine Advantage Validation Tool) -- http://go.microsoft.com/fwlink/?linkid=39204 Ø16 - DPF: (56762DEC-6B0D-4AB4-A8AD-989993B5D08B) -- http://www.eset.eu/buxus/docs/OnlineScanner.cab Ø16 - DPF: (5D86DDB5-BDF9-441b-9E9E-D4730F4EE499) (BDSCANONLINE Control) -- http://download.bitdefender.com/reso...an8/oscan8.cab Ø16 - DPF: (6E32070A-766D-4EE6-879c-DC1FA91D2FC3) (MUWebControl Class) -- http://www.update.microsoft.com/micr...?1222679603245 Ø18 - Protocol: skype4com - (FFC8B962-9B40-4DFF-9458-1830C7DD7F5D) - D: \ PROGRA ~ 1 \ COMUNE ~ 1 \ Skype \ SKYPE4 ~ 1.DLL Ø20 - Winlogon Notify:! SASWinLogon - D: \ Program Files \ SUPERAntiSpyware \ SASWINLO.dll O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - D: \ Program Files \ Ares \ chatServer.exe O23 - Service: Distributed - Ignoto proprietario - D: \ Program Files \ Common Files \ Microsoft Shared \ Msinfo \ ServerNet.exe (file mancanti) O23 - Service: PC Tools AntiVirus Engine (PCTAVSvc) - PC Tools Research Pty Ltd - D: \ Program Files \ PC Tools AntiVirus \ PCTAVSvc.exe O23 - Service: ServiceLayer - Nokia. - D: \ Program Files \ PC Connectivity Solution \ ServiceLayer.exe O23 - Service: SmartLinkService (SLService) - Smart Link - D: \ WINDOWS \ SYSTEM32 \ slserv.exe -- Fine del file - 4970 bytes ====== ====== Registro discarica [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Explorer \ Browser Helper Objects \ (0000CC75-ACF3-4cac-A0A9-DD3868E06852)] Classe DAPHelper - D: \ Program Files \ DAP \ DAPBHO.dll [2007-11-27 98304] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Explorer \ Browser Helper Objects \ (22BF413B-C6D2-4d91-82A9-A0F997BA588C)] Skype add-on (mastermind) - D: \ Program Files \ Skype \ Toolbars \ Internet Explorer \ SkypeIEPlugin.dll [2008-05-30 1410344] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Explorer \ Browser Helper Objects \ (761497BB-D6F0-462C-B6EB-D4DAF1D92D43)] SSVHelper Class - D: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll [2008-06-10 509328] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Explorer \ Browser Helper Objects \ (7E853D72-626A-48EC-A868-BA8D5E23E045)] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Internet Explorer \ Toolbar] (DE9C389F-3316-41A7-809B-AA305ED9D922) [HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ Curr entVersion \ Run] "QuickTime Task" = D: \ Program Files \ QuickTime \ qttask.exe [2006-09-01 282624] "googletalk" = D: \ Program Files \ Google \ Google Talk \ googletalk.exe [2007-01-02 3739648] "SunJavaUpdateSched" = D: \ Program Files \ Java \ jre1.6.0_07 \ bin \ jusched.exe [2008-06-10 144784] [HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ Curre ntVersion \ Run] "ctfmon.exe" = D: \ WINDOWS \ system32 \ ctfmon.exe [2004-08-03 15360] "BitTorrent DNA" = D: \ Program Files \ DNA \ btdna.exe [2008-12-30 342848] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Shared Tools \ msconfig \ startupreg \ ctfmon.exe] D: \ WINDOWS \ system32 \ ctfmon.exe [2004-08-03 15360] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Shared Tools \ msconfig \ startupreg \ PCSuiteTrayApplication] [] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Shared Tools \ msconfig \ startupreg \ PCTAVApp] D: \ Program Files \ PC Tools AntiVirus \ PCTAV.exe [2008-09-25 1370000] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon \ Notify \! SASWinLogon] D: \ Program Files \ SUPERAntiSpyware \ SASWINLO.dll [2008-07-23 352256] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Explorer \ ShellExecuteHooks] "(5AE067D3-9AFB-48E0-853A-EBB7F4A000DA)" = D: \ Program Files \ SUPERAntiSpyware \ SASSEH.DLL [2008-05-13 77824] [HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Contro l \ SafeBoot \ Minimal \ SBCSSvc] [HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Contro l \ SafeBoot \ Network \ PCTAVSvc] [HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Contro l \ SafeBoot \ Network \ SBCSSvc] [HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ Curr entVersion \ Policies \ System] "dontdisplaylastusername" = 0 "LegalNoticeCaption" = "LegalNoticeText" = "shutdownwithoutlogon" = 1 "undockwithoutlogon" = 1 [HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ Curre ntVersion \ Policies \ Explorer] "NoDrives" = 0 "NoDriveAutoRun" = FFFFFFFF "NoDriveTypeAutoRun" = 36 [HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ Curr entVersion \ Policies \ Explorer] "NoDriveTypeAutoRun" = "NoDrives" = "NoDriveAutoRun" = [HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ servizi es \ sharedaccess \ parameters \ firewallpolicy \ profilo standard \ authorizedapplications \ list] "% windir% \ system32 \ sessmgr.exe" = "% windir% \ system32 \ sessmgr.exe: *: Enabled: @ Xpsp2res.dll, -22019" "D: \ Program Files \ Ares \ Ares.exe" = "D: \ Program Files \ Ares \ Ares.exe: *: Enabled: Ares p2p per windows" "D: \ Program Files \ NetMeeting \ conf.exe" = "D: \ Program Files \ NetMeeting \ conf.exe: *: Enabled: Windows ® NetMeeting ®" "D: \ Program Files \ Opera \ Opera.exe" = "D: \ Program Files \ Opera \ Opera.exe: *: Enabled: Opera Browser per Internet" "D: \ Program Files \ Google \ Google Talk \ googletalk.exe" = "D: \ Program Files \ Google \ Google Talk \ googletalk.exe: *: Enabled: Google Talk" "D: \ Program Files \ Yahoo! \ Messenger \ YahooMessenger.exe" = "D: \ Pro gram Files \ Yahoo! \ Messenger \ YahooMessenger.exe: *: Attiva d: Yahoo! Messenger" "D: \ Program Files \ Yahoo! \ Messenger \ YServer.exe" = "D: \ Program Files \ Yahoo! \ Messenger \ YServer.exe: *: Enabled: Yahoo! FT Server" "D: \ Program Files \ AIM6 \ aim6.exe" = "D: \ Program Files \ AIM6 \ aim6.exe: *: Enabled: AIM" "D: \ Program Files \ Skype \ Phone \ Skype.exe" = "D: \ Program Files \ Skype \ Phone \ Skype.exe: *: Enabled: Skype" "D: \ Program Files \ Trillian \ trillian.exe" = "D: \ Program Files \ Trillian \ trillian.exe: *: Enabled: Trillian" "D: \ Program Files \ Miranda IM \ miranda32.exe" = "D: \ Program Files \ Miranda IM \ miranda32.exe: *: Enabled: Miranda IM" "D: \ Program Files \ LimeWire \ LimeWire.exe" = "D: \ Program Files \ LimeWire \ LimeWire.exe: *: Enabled: LimeWire" "D: \ Program Files \ MSN Messenger \ msnmsgr.exe" = "D: \ Program Files \ MSN Messenger \ msnmsgr.exe: *: Enabled: Windows Live Messenger 8.1" "D: \ Program Files \ MSN Messenger \ livecall.exe" = "D: \ Program Files \ MSN Messenger \ livecall.exe: *: Enabled: Windows Live Messenger 8.1 (Phone)" "D: \ Program Files \ DNA \ btdna.exe" = "D: \ Program Files \ DNA \ btdna.exe: *: Enabled: DNA" "D: \ Program Files \ BitTorrent \ bittorrent.exe" = "D: \ Program Files \ BitTorrent \ bittorrent.exe: *: Enabled: BitTorre nt" [HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ servizi es \ sharedaccess \ parameters \ firewallpolicy \ domainpr ofilo \ authorizedapplications \ list] "% windir% \ system32 \ sessmgr.exe" = "% windir% \ system32 \ sessmgr.exe: *: Enabled: @ Xpsp2res.dll, -22019" "D: \ Program Files \ MSN Messenger \ msncall.exe" = "D: \ Program Files \ MSN Messenger \ msncall.exe: *: Enabled: Windows Live Messenger 8.0 (Phone)" "D: \ Program Files \ MSN Messenger \ msnmsgr.exe" = "D: \ Program Files \ MSN Messenger \ msnmsgr.exe: *: Enabled: Windows Live Messenger 8.1" "D: \ Program Files \ MSN Messenger \ livecall.exe" = "D: \ Program Files \ MSN Messenger \ livecall.exe: *: Enabled: Windows Live Messenger 8.1 (Phone)" [HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ Curre ntversion \ explorer \ mountpoints2 \ (dafa2220-8123-11dd-aa9c-00065b298742)] shell \ AutoRun \ command - G: \ CONFIG \ S-1-5-21-1482476501-1644491937-682003330-1013 \ Cfg.exe shell \ open \ command - G: \ CONFIG \ S-1-5-21-1482476501-1644491937-682003330-1013 \ Cfg.exe ====== Elenco dei file e le cartelle create negli ultimi mesi 1 ====== 2009-01-01 20:51:34 SHD ---- ---- D: \ FOUND.174 2008-12-31 19:12:10 SHD ---- ---- D: \ FOUND.173 2008-12-30 23:08:48 SHD ---- ---- D: \ FOUND.172 2008-12-30 18:53:42 SHD ---- ---- D: \ FOUND.171 2008-12-30 16:16:01 D ---- ---- D: \ Documents and Settings \ Burhan \ Dati applicazioni \ BitTorrent 2008-12-30 16:15:44 D ---- ---- D: \ Program Files \ DNA 2008-12-30 16:15:44 D ---- ---- D: \ Program Files \ BitTorrent 2008-12-30 16:15:44 D ---- ---- D: \ Documents and Settings \ Burhan \ Dati applicazioni \ DNA 2008-12-30 14:46:46 SHD ---- ---- D: \ FOUND.170 2008-12-29 23:24:22 SHD ---- ---- D: \ FOUND.169 2008-12-29 15:06:17 D ---- ---- D: \ Documents and Settings \ Burhan \ Dati applicazioni \ IDM 2008-12-29 13:39:04 SHD ---- ---- D: \ FOUND.168 2008-12-28 05:25:52 D ---- ---- D: \ Program Files \ IrfanView 2008-12-26 22:39:46 SHD ---- ---- D: \ FOUND.167 2008-12-26 15:36:18 SHD ---- ---- D: \ FOUND.166 2008-12-26 12:37:24 SHD ---- ---- D: \ FOUND.165 2008-12-25 21:19:38 SHD ---- ---- D: \ FOUND.164 2008-12-20 14:47:41 D ---- ---- D: \ Program Files \ HyCam2 2008-12-20 12:02:48 D ---- ---- D: \ Program Files \ Frets on Fire 2008-12-20 09:54:02 SHD ---- ---- D: \ FOUND.163 2008-12-17 11:38:48 SHD ---- ---- D: \ FOUND.162 2008-12-15 23:31:13 D ---- ---- D: \ Documents and Settings \ Burhan \ Dati applicazioni \ LimeWire 2008-12-15 23:03:16 SHD ---- ---- D: \ FOUND.161 2008-12-15 16:52:14 SHD ---- ---- D: \ FOUND.160 2008-12-13 13:47:12 SHD ---- ---- D: \ FOUND.159 2008-12-10 21:05:58 SHD ---- ---- D: \ FOUND.158 2008-12-09 23:27:12 D ---- ---- D: \ Documents and Settings \ Burhan \ Dati applicazioni \ J River 2008-12-09 13:10:10 D ---- ---- D: \ Program Files \ Common Files \ NSV 2008-12-06 05:52:44 SHD ---- ---- D: \ FOUND.157 2008-12-06 01:43:41 N ---- ---- D: \ WINDOWS \ system32 \ vxblock.dll 2008-12-06 01:43:41 N ---- ---- D: \ WINDOWS \ system32 \ pxwave.dll 2008-12-06 01:43:41 N ---- ---- D: \ WINDOWS \ system32 \ pxmas.dll 2008-12-06 01:43:41 N ---- ---- D: \ WINDOWS \ system32 \ pxhpinst.exe 2008-12-06 01:43:41 N ---- ---- D: \ WINDOWS \ system32 \ pxdrv.dll 2008-12-06 01:43:40 N ---- ---- D: \ WINDOWS \ system32 \ px.dll 2008-12-06 01:43:14 D ---- ---- D: \ Program Files \ Winamp 2008-12-06 01:43:14 Un ---- ---- D: \ WINDOWS \ winamp.ini 2008-12-05 14:40:22 D ---- ---- D: \ Documents and Settings \ Burhan \ Dati applicazioni \ Netscape 2008-12-05 14:39:56 D ---- ---- D: \ Program Files \ Netscape 2008-12-04 17:34:26 SHD ---- ---- D: \ FOUND.156 2008-12-04 08:55:46 SHD ---- ---- D: \ FOUND.155 2008-12-02 22:24:47 D ---- ---- D: \ Documents and Settings \ Burhan \ Dati applicazioni \ InstallShield ====== Elenco dei file e le cartelle modificate negli ultimi mesi 1 ====== 2008-12-31 05:00:54 N ---- ---- D: \ WINDOWS \ SchedLgU.txt 2008-12-24 22:49:44 Un ---- ---- D: \ WINDOWS \ ModemLog_Smart Link 56K Voice Modem.txt ====== Elenco dei conducenti (R = Corsa S = Arrestato, boot = 0, 1 = sistema, 2 = Auto, 3 = domanda, 4 = disabili )====== R1 P3; processore Intel PentiumIII Driver; D: \ WINDOWS \ system32 \ drivers \ p3.sys [2004-08-03 42496] R1 SASDIFSV; SASDIFSV; \? \ D: \ Program Files \ SUPERAntiSpyware \ SASDIFSV.SYS [] R1 SASKUTIL; SASKUTIL; \? \ D: \ Program Files \ SUPERAntiSpyware \ SASKUTIL.sys [] R1 WS2IFSL; Windows Socket 2,0 non IFS Service Provider Supporto ambiente; D: \ WINDOWS \ System32 \ drivers \ ws2ifsl.sys [2001-08-23 12032] R2 AVFilter; AVFilter; D: \ WINDOWS \ system32 \ drivers \ AVFilter.sys [2008-02-12 21904] R2 dmsmbios; dmsmbios; \? \ D: \ WINDOWS \ system32 \ dmsmbios.sys [] R3 ac97intc; Intel (R) 82801 installare il Service Audio Driver (WDM); D: \ WINDOWS \ system32 \ drivers \ ac97intc.sys [2001-08-17 96256] R3 AVHook; AVHook; D: \ WINDOWS \ system32 \ drivers \ AVHook.sys [2007-12-06 28568] R3 AVRec; AVRec; D: \ WINDOWS \ system32 \ drivers \ AVRec.sys [2007-12-06 21912] R3 EL90XBC; 3Com EtherLink XL 90XB / C Adapter Driver; D: \ WINDOWS \ system32 \ drivers \ el90xbc5.sys [2001-08-17 66591] R3 i81x; i81x; D: \ WINDOWS \ system32 \ drivers \ i81xnt5.sys [2004-08-03 161020] R3 MODEMCSA; Unimodem Streaming filtro; D: \ WINDOWS \ system32 \ drivers \ MODEMCSA.sys [2001-08-17 16128] R3 Mtlmnt5; Mtlmnt5; D: \ WINDOWS \ system32 \ drivers \ Mtlmnt5.sys [2004-08-03 126686] R3 Slntamr; Smart Link 56K Modem Driver D: \ WINDOWS \ system32 \ drivers \ slntamr.sys [2004-08-03 404990] R3 SlWdmSup; SlWdmSup; D: \ WINDOWS \ system32 \ drivers \ SlWdmSup.sys [2004-08-03 13240] R3 usbhub; USB2 Enabled Hub D: \ WINDOWS \ system32 \ drivers \ Usbhub.sys [2004-08-03 57600] R3 usbuhci; Microsoft USB Universal Host Controller Miniport Driver; D: \ WINDOWS \ system32 \ drivers \ usbuhci.sys [2004-08-03 20480] S1 b88b9e8e; b88b9e8e; D: \ WINDOWS \ System32 \ drivers \ b88b9e8e.sys [2008-08-05 109150] S3 AvFlt; Antivirus Filter Driver; D: \ WINDOWS \ system32 \ drivers \ av5flt.sys [] S3 CCDECODE; Chiuso Caption Decoder; D: \ WINDOWS \ system32 \ drivers \ CCDECODE.sys [2004-08-03 17024] S3 iAimFP0; iAimFP0; D: \ WINDOWS \ system32 \ drivers \ wADV01nt.sys [2004-08-03 12415] S3 iAimFP1; iAimFP1; D: \ WINDOWS \ system32 \ drivers \ wADV02NT.sys [2004-08-03 12127] S3 iAimFP2; iAimFP2; D: \ WINDOWS \ system32 \ drivers \ wADV05NT.sys [2004-08-03 11775] S3 iAimFP3; iAimFP3; D: \ WINDOWS \ system32 \ drivers \ wSiINTxx.sys [2004-08-03 12063] S3 iAimFP4; iAimFP4; D: \ WINDOWS \ system32 \ drivers \ wVchNTxx.sys [2004-08-03 19455] S3 iAimFP5; iAimFP5; D: \ WINDOWS \ system32 \ drivers \ wADV07nt.sys [2004-08-03 11807] S3 iAimFP6; iAimFP6; D: \ WINDOWS \ system32 \ drivers \ wADV08nt.sys [2004-08-03 11295] S3 iAimFP7; iAimFP7; D: \ WINDOWS \ system32 \ drivers \ wADV09nt.sys [2004-08-03 11871] S3 iAimTV0; iAimTV0; D: \ WINDOWS \ system32 \ drivers \ wATV01nt.sys [2004-08-03 29311] S3 iAimTV1; iAimTV1; D: \ WINDOWS \ system32 \ drivers \ wATV02NT.sys [2004-08-03 19551] S3 iAimTV3; iAimTV3; D: \ WINDOWS \ system32 \ drivers \ wATV04nt.sys [2004-08-03 33599] S3 iAimTV4; iAimTV4; D: \ WINDOWS \ system32 \ drivers \ wCh7xxNT.sys [2004-08-03 23615] S3 iAimTV5; iAimTV5; D: \ WINDOWS \ system32 \ drivers \ wATV10nt.sys [2004-08-03 25471] S3 iAimTV6; iAimTV6; D: \ WINDOWS \ system32 \ drivers \ wATV06nt.sys [2004-08-03 22271] S3 MBAMSwissArmy; MBAMSwissArmy; \? \ D: \ WINDOWS \ system32 \ drivers \ mbamswissarmy.sys [] S3 MSTEE; Microsoft Streaming Tee / Sink-to-Sink convertitore D: \ WINDOWS \ system32 \ drivers \ MSTEE.sys [2004-08-03 5504] S3 Mtlstrm; Mtlstrm; D: \ WINDOWS \ system32 \ drivers \ Mtlstrm.sys [2004-08-03 1309184] S3 NABTSFEC; NABTS / FEC VBI Codec; D: \ WINDOWS \ system32 \ drivers \ NABTSFEC.sys [2004-08-03 85376] S3 NdisIP; Microsoft TV / Video Connection; D: \ WINDOWS \ system32 \ drivers \ NdisIP.sys [2004-08-03 10880] S3 nmwcd; Nokia Telefono USB Capogruppo; D: \ WINDOWS \ system32 \ drivers \ nmwcd.sys [2007-02-22 137216] S3 nmwcdc; Nokia USB generico; D: \ WINDOWS \ system32 \ drivers \ nmwcdc.sys [2007-02-22 8320] S3 nmwcdcj; Nokia porta USB; D: \ WINDOWS \ system32 \ drivers \ nmwcdcj.sys [2007-02-22 12288] S3 nmwcdcm; Nokia Modem USB D: \ WINDOWS \ system32 \ drivers \ nmwcdcm.sys [2007-02-22 12288] S3 NtMtlFax; NtMtlFax; D: \ WINDOWS \ system32 \ drivers \ NtMtlFax.sys [2004-08-03 180360] S3 SASENUM; SASENUM; \? \ D: \ Program Files \ SUPERAntiSpyware \ SASENUM.SYS [] S3 SBRE; SBRE; \? \ D: \ WINDOWS \ system32 \ drivers \ SBREdrv.sys [] S3 SLIP; BDA Slip De-Framer; D: \ WINDOWS \ system32 \ drivers \ SLIP.sys [2004-08-03 11136] S3 SlNtHal; SlNtHal; D: \ WINDOWS \ system32 \ drivers \ Slnthal.sys [2004-08-03 95424] S3 streamip; BDA IPSink; D: \ WINDOWS \ system32 \ drivers \ StreamIP.sys [2004-08-03 15360] S3 usbprint; Microsoft stampante USB Classe D: \ WINDOWS \ system32 \ drivers \ usbprint.sys [2004-08-03 25856] S3 USBSTOR; USB Mass Storage Driver D: \ WINDOWS \ system32 \ drivers \ Usbstor.sys [2004-08-03 26496] S3 WpdUsb; WpdUsb; D: \ WINDOWS \ System32 \ Drivers \ wpdusb.sys [2004-08-11 18944] S3 WSTCODEC; World Standard Teletext Codec; D: \ WINDOWS \ system32 \ drivers \ WSTCODEC.SYS [2004-08-03 19328] S3 XIRLINK; IBM PC Camera; D: \ WINDOWS \ system32 \ drivers \ C-itnt.sys [1999-10-19 435655] ====== Elenco dei servizi (R = Corsa S = Arrestato, boot = 0, 1 = sistema, 2 = Auto, 3 = domanda, 4 = disabili )====== R2 MDM; Machine Debug Manager, D: \ Program Files \ Common Files \ Microsoft Shared \ VS7DEBUG \ Mdm.exe [2003-06-19 322120] R2 UMWdf; Framework driver modalità utente Windows; D: \ WINDOWS \ system32 \ wdfmgr.exe [2004-08-11 38912] Distribuito S2; Distribuito; D: \ Program Files \ Common Files \ Microsoft Shared \ Msinfo \ ServerNet.exe [] S2 PCTAVSvc; PC Tools AntiVirus Engine; D: \ Program Files \ PC Tools AntiVirus \ PCTAVSvc.exe [2008-09-23 995520] S2 SLService; SmartLinkService; D: \ WINDOWS \ system32 \ slserv.exe [2004-08-04 73796] S3 AresChatServer; Ares Chatroom server; D: \ Program Files \ Ares \ chatServer.exe [2007-03-20 263168] S3 aspnet_state; ASP.NET membro Servizio; D: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0.50727 \ aspn et_state.exe [2005-09-23 29896] S3 clr_optimization_v2.0.50727_32;. NET Runtime Optimization Service v2.0.50727_X86; D: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0.50727 \ msco rsvw.exe [2005-09-23 66240] S3 OSE; Office Source Engine, D: \ Program Files \ Common Files \ Microsoft Shared \ Source Engine \ OSE.EXE [2003-07-28 89136] S3 ServiceLayer; ServiceLayer; D: \ Program Files \ PC Connectivity Solution \ ServiceLayer.exe [2007-06-15 300544] S3 usnjsvc; Messenger Sharing Folders USN Journal Reader servizio; D: \ Program Files \ MSN Messenger \ usnsvc.exe [2007-01-19 97136] S3 WLSetupSvc; il programma di installazione di Windows Live Service; D: \ Program Files \ Windows Live \ installer \ WLSetupSvc.exe [2007-10-25 266240] EOF ----------------- ----------------- |
|
#4
| |||
| |||
| info.txt casuale di file di log del sistema di informazione strumento 1,02 2008-09-26 23:02:40 Disinstallare elenco ====== ====== -> D: \ WINDOWS \ IsUninst.exe-f "D: \ Program Files \ IbmPcCamera \ Uninst.isu" -> rundll32.exe setupapi.dll, InstallHinfSection DefaultUninstall 132 D: \ WINDOWS \ INF \ PCHealth.inf ACDSee -> D: \ PROGRA ~ 1 \ ACDSYS ~ 1 \ ACDSee \ UNWISE.EXE D: \ PROGRA ~ 1 \ ACDSYS ~ 1 \ ACDSee \ INSTALL.LOG Adobe Flash Player ActiveX -> D: \ WINDOWS \ system32 \ Macromed \ Flash \ uninstall_acti veX.exe Adobe Flash Player Plugin -> D: \ WINDOWS \ system32 \ Macromed \ Flash \ uninstall_plug in.exe OBIETTIVO 6 -> D: \ Program Files \ AIM6 \ uninst.exe Ares 2.0.9 -> "D: \ Program Files \ Ares \ uninstall.exe" Astro123 v1.40--> "D: \ Program Files \ Astro123 \ unins000.exe" AX-Axialis Icone 4,5 -> D: \ Program Files \ Axialis \ AX-Icons \ UnInstall.exe "AX-Icone 4,5" "AXIcons.exe" CCleaner (rimuovere solo )-->" D: \ Program Files \ CCleaner \ uninst.exe " CDisplay 1,8 -> "D: \ Program Files \ CDisplay \ unins000.exe" Download Accelerator Plus -> D: \ PROGRA ~ 1 \ DAP \ UNWISE.EXE D: \ PROGRA ~ 1 \ DAP \ INSTALL.LOG ESET Online Scanner -> D: \ WINDOWS \ system32 \ OnlineScannerUninstaller.ex e ffdshow [rev 2019] [2008/06/22 ]-->" D: \ Program Files \ ffdshow \ unins000.exe " Flash Studio Pro Trial -> "D: \ Program Files \ Flash Studio Pro Trial \ unins000.exe" FLV Player 2.0, costruire 24 -> C: \ Program Files \ FLV Player \ uninst.exe Foxit Reader -> C: \ Program Files \ Foxit Software \ Foxit Reader \ Uninstall.exe Glary Registry Repair 2.9 -> "D: \ Program Files \ Glary Registry Repair \ unins000.exe" Google Earth -> msiexec.exe / i (1D14373E-7970-4F2F-A467-ACA4F0EA21E3) Google Talk (solo rimuovere )-->" D: \ Program Files \ Google \ Google Talk \ uninstall.exe " Google Toolbar per Internet Explorer -> msiexec.exe / i (DBEA1034-5882-4A88-8033-81C4EF0CFA29) Google Toolbar per Internet Explorer -> regsvr32 / u / s "d: \ Programmi \ Google \ googletoolbar2.dll" HijackThis 2.0.2 -> "D: \ Documents and Settings \ Burhan \ Documenti \ TUTTE LE SOFTWARES \ HijackThis.exe" / uninstall Hotfix per Windows XP (KB915865 )-->" D: \ WINDOWS \ $ NtUninstallKB915865 $ \ spuninst \ spunin st.exe " Internet Download Manager -> D: \ Program Files \ Internet Download Manager \ Uninstall.exe Malwarebytes' Anti-Malware -> "D: \ Program Files \ Malwarebytes' Anti-Malware \ unins000.exe" Microsoft National Language Support inferiore API -> "D: \ WINDOWS \ $ NtServicePackUninstallNLSDownlevelMa pping $ \ spuninst \ spuninst.exe" Microsoft Office Excel Viewer 2003 -> msiexec.exe / i (90840409-6000-11D3-8CFE-0150048383C9) Microsoft Office XP Professional con FrontPage -> msiexec.exe / i (90280409-6000-11D3-8CFE-0050048383C9) Microsoft Visual Basic 6.0 Enterprise Edition -> "D: \ Program Files \ Microsoft Visual Studio \ VB98 \ Setup \ 1033 \ Setup.exe" Microsoft Web Publishing Wizard 1,53 -> Rundll32 Advpack.dll, LaunchINFSection D: \ WINDOWS \ INF \ wpie3x86.inf, WebPostUninstall Mobysaurus Thesaurus -> "D: \ WINDOWS \ system32 \ SpoonUninstall.exe" <uninstall> D: \ WINDOWS \ system32 \ SpoonUninstall-Mobysaurus Thesaurus.dat Nokia Connectivity Cable Driver -> msiexec.exe / X (11964613-805F-432D-A12B-169554B793E7) Nokia Multimedia Player -> D: \ PROGRA ~ 1 \ COMUNE ~ 1 \ strutture ~ 1 \ Driver \ 7 \ INTEL3 ~ 1 \ I Driver.exe / M (4D6183C0-005C-4B1F-8261-4B0F71F1C4A5) Nokia PC Suite -> D: \ Documents and Settings \ All Users \ Dati applicazioni \ Installations \ (A982E6CC-9F0D-4948-9B18-BDFD55DE4A72) \ Nokia_PC_Suite_6_84_10_3_EA.exe Nokia PC Suite -> msiexec.exe / i (A982E6CC-9F0D-4948-9B18-BDFD55DE4A72) Opera 9,51 -> msiexec.exe / x (179624B1-2683-45ED-965A-B72189EB5820) PC Connectivity Solution -> msiexec.exe / i (99A40651-0BC2-4095-8F9A-A40FAB224FEF) PowerDVD -> Rundll32 D: \ PROGRA ~ 1 \ COMUNE ~ 1 \ strutture ~ 1 \ motore \ 6 \ INTEL3 ~ 1 \ Ct or.dll, LaunchSetup "D: \ Program Files \ InstallShield Installation Information \ (6811CAA0-BF12 - 11D4-9EA1-0050BAE317E1) \ Setup.exe "-uninstall QuickTime -> msiexec.exe / i (F07B861C-72B9-40A4-8B1A-AAED4C06A7E8) RichFX Player -> Rundll32 D: \ PROGRA ~ 1 \ COMUNE ~ 1 \ RichFX \ npvpg004.dll, Disinstalla _Player Skype ™ 3.8 -> msiexec.exe / x (5C82DAE5-6EB0-4374-9254-BE3319BA4E82) TEMPI Istruzione - un livello di Fisica -> D: \ WINDOWS \ uninst.exe-f "D: \ Program Files \ TIMES Educazione \ Livello A \ Fisica \ DeIsL2.isu"-CD: \ PROGRA ~ 1 \ TIMESE ~ 1 \ ALEVEL ~ 1 \ Fisica \ _ISREG32.DL L TZ Connection Booster 2.6 -> "D: \ Program Files \ TZ Connection Booster \ unins000.exe" AntiVirus USB Drive 2.3 -> "D: \ Program Files \ USBAntiVirus \ unins000.exe" Viewpoint Media Player -> D: \ Program Files \ Viewpoint \ Viewpoint Media Player \ mtsAxInstaller.exe / u Windows Driver Package - Nokia (WUDFRd) WPD (06/01/2007 6.84.33.0) -> D: \ PROGRA ~ 1 \ DIFX \ 270581355A767BF1 \ dpinst.exe / u D: \ WINDOWS \ system32 \ DRVSTORE \ pccswpddri_044C8712DB 44F83D9DE6C376991EE9254E0A69E4 \ pccswpddriver.inf Windows Driver Package - Nokia Modem (02/15/2007 3,1) -> D: \ PROGRA ~ 1 \ DIFX \ 270581355A767BF1 \ dpinst.exe / u D: \ WINDOWS \ system32 \ DRVSTORE \ pccs_bluet_8B37DC7291 8CCD58A6EC20373AF6242B037A293B \ pccs_bluetooth.inf Windows Driver Package - Nokia Modem (02/15/2007 3,1) -> D: \ PROGRA ~ 1 \ DIFX \ 270581355A767BF1 \ dpinst.exe / u D: \ WINDOWS \ system32 \ DRVSTORE \ pccs_bluet_F12A08B6F7 76984A95553486F64C541356F86E38 \ pccs_bluetooth.inf Windows Driver Package - Nokia Modem (05/24/2007 6.84.0.1) -> D: \ PROGRA ~ 1 \ DIFX \ 270581355A767BF1 \ dpinst.exe / u D: \ WINDOWS \ system32 \ DRVSTORE \ nokbtmdm_5E1541AFF1E1 EA3554CE566743CCAD323ED1C108 \ nokbtmdm.inf Windows Installer 3.1 (KB893803 )-->" D: \ WINDOWS \ $ MSI31Uninstall_KB893803v2 $ \ spuninst \ spuninst.exe " Windows Live Installer -> msiexec.exe / x (A7E4ECCA-4A8E-4258-8EC8-2DCCF5B11320) Windows Live Messenger -> msiexec.exe / i (571700F0-DB9D-4B3A-B03D-35A14BB5939F) Windows Media Format Runtime -> "D: \ Program Files \ Windows Media Player \ wmsetsdk.exe" / UninstallAll Windows Media Player 10 -> "D: \ Program Files \ Windows Media Player \ Setup_wm.exe" / Rimuovi WinRAR archiver -> D: \ Program Files \ WinRAR \ uninstall.exe Yahoo! Messenger -> D: \ PROGRA ~ 1 \ YAHOO! \ MESSEN ~ 1 \ UNWISE.EXE / UD: \ PROGRA ~ 1 \ YAHOO! \ MESSEN ~ 1 \ INSTALL.LOG Variabili d'ambiente ====== ====== "ComSpec" =% SystemRoot% \ system32 \ cmd.exe "Path" =% systemroot% \ system32;% systemroot%;% systemr oot% \ system32 \ wbem; D: \ Program Files \ PC Connectivity Solution; D: \ Program Files \ QUICKTIME \ QTSYSTEM "windir" =% SystemRoot% "FP_NO_HOST_CHECK" = NO "OS" = Windows_NT "PROCESSOR_ARCHITECTURE" = x86 "PROCESSOR_LEVEL" = 6 "PROCESSOR_IDENTIFIER" = x86 Family 6 Model 10 Stepping 8, GenuineIntel "PROCESSOR_REVISION" = 080a "NUMBER_OF_PROCESSORS" = 1 "PATHEXT" =. COM;. EXE;. BAT;. CMD;. VBS;. VBE;. JS;. Jse;. WSF;. WSH "TEMP" =% SystemRoot% \ TEMP "TMP" =% SystemRoot% \ TEMP "CLASSPATH" =.; D: \ Program Files \ QuickTime \ QTSystem \ QTJava.zip "QTJAVA" = D: \ Program Files \ QuickTime \ QTSystem \ QTJava.zip EOF ----------------- ----------------- |
|
#5
| |||
| |||
| Malwarebytes' Anti-Malware 1,28 Database versione: 1234 5/1/2600 Windows Service Pack 2 12/31/2008 6:04:35 AM mbam-log-2008-12-31 (06-04-35). txt Tipo di scansione: Scansione completa (D: \ |) Oggetti scandita: 107121 Tempo trascorso: 24 minuti (s), 0 secondi (s) Processi di memoria infetti: 0 Moduli di memoria infetti: 0 Chiavi di registro infetti: 2 Valori del registro infetti: 0 I dati del Registro di oggetti infetti: 0 Cartelle infette: 0 File infetti: 0 Processi di memoria infetti: (N. oggetti dannosi individuati) Moduli di memoria infetti: (N. oggetti dannosi individuati) Chiavi di registro infette: HKEY_CLASSES_ROOT \ AppID \ (bdbebf18-7615-4971-9ac3-bd6ffb7ad6c1) (Adware.WebDir) -> quarantena ed eliminato con successo. HKEY_CLASSES_ROOT \ AppID \ DLP.DLL (Trojan.BHO) -> quarantena ed eliminato con successo. Valori del registro infetti: (N. oggetti dannosi individuati) I dati del Registro di oggetti infetti: (N. oggetti dannosi individuati) Cartelle infette: (N. oggetti dannosi individuati) I file infetti: (N. oggetti dannosi individuati) |
|
#6
| |||
| |||
| Apri HijackThis e selezionare Non solo un sistema di scansione. Mettere un segno di spunta accanto alle seguenti voci: (se esiste) F2 - REG: system.ini: Shell = explorer.exe Importante: Chiudere tutte le finestre aperte ad eccezione di HijackThis e quindi fare clic su Fix controllati. Una volta completato, uscita HijackThis. ---------- Scarica ComboFix © by SUBS da uno dei link qui sotto. Assicurarsi superiore a salvare la Desktop. Link # 1 Link # 2 ** Nota: E 'importante che si è salvato direttamente sul tuo desktop NON eseguirlo ancora! Nota: le istruzioni qui di seguito sono stati creati appositamente per questo utente. Se non siete l'utente, NON seguire queste istruzioni in quanto potrebbero danneggiare il funzionamento del sistema Elimina i file / cartelle, come segue: 1. Vai a Inizio > Correre > Tipo Notepad.exe e fare clic su OK per aprire il Blocco note. Esso dovere essere il Blocco note, non Wordpad. 2. Copia il testo nella casella qui sotto il codice evidenziando tutto il testo e premendo Ctrl + C Codice: Killall:: File:: D: \ FOUND.174 D: \ FOUND.173 D: \ FOUND.172 D: \ FOUND.171 D: \ FOUND.170 D: \ FOUND.169 D: \ FOUND.168 D: \ FOUND.167 D: \ FOUND.166 D: \ FOUND.165 D: \ FOUND.164 D: \ FOUND.163 D: \ FOUND.162 D: \ FOUND.161 D: \ FOUND.160 D: \ TROVATO ,159 D: \ FOUND.158 D: \ FOUND.157 D: \ FOUND.156 D: \ FOUND.155 registro: [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Browser Helper Objects \ (7E853D72 - 626A-48EC-A868-BA8D5E23E045)] [-HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Internet Explorer \ Toolbar] (DE9C389F-3316-41A7-809B-AA305ED9D922) [-HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Explorer \ mountpoints2 \ ( dafa2220-8123-11dd-aa9c-00065b298742)] 4. Quindi, fare clic su File > Salvare 5. Nome del file CFScript.txt - Salva il file sul tuo desktop 6. Quindi, trascinare il CFScript (tenere premuto il tasto sinistro del mouse mentre si trascina il file) e rilasciarlo (rilasciare il tasto sinistro del mouse) in ComboFix.exe come potete vedere nella schermata qui sotto. Importante: Eseguire questa attentamente le istruzioni! ![]() ComboFix inizierà a eseguire, basta seguire le istruzioni. Dopo il reboot (nel caso in cui si chiede di riavviare), che produrrà un log per voi. Post che log (Combofix.txt) nella prossima risposta. Nota: Non clic ComboFix della finestra, mentre è in esecuzione. Questo può causare il sistema per congelare |
![]() |
|
| Segnalibri |
Threads simili | ||||
| Filo | Thread Starter | Forum | Risposte | Ultimo Post |
| High Speed Internet Lan velocità grazie Question! | P5200 | Reti, Modem & VoIP | 4 | 24 novembre 2009 22:46 |
| Slow internet Carica velocità 4 volte più veloce di download | palmermcfc | Reti, Modem & VoIP | 12 | 31 maggio 2009 21:46 |
| Real Bus CPU Speed Wrong - Intel Pentium Dual-Core E2200 | Nikronius | CPU, Schede Madri & RAM | 3 | 10 maggio 2009 23:10 |
| Esecuzione lenta del computer, è stata bene in precedenza, all'interno HJT Entra | computernoob64 | Virus, Spyware e sicurezza | 43 | 22 Feb 2009 21:34 |
| Laptop velocità di connessione lenta | Poeticsoul44 | Reti, Modem & VoIP | 13 | 25 gen 2009 14:03 |
| Thread Tools | |
| |